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systems principles SOSP '07 
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Full text available: Q pdf( 292.47 KB) Additional Information: full citation , abstract, references, index terms 

Diagnosing production run failures is a challenging yet importanttask. Most previous work 
focuses on offsite diagnosis, i.e. development site diagnosis with the programmers 
present. This is insufficient for production-run failures as: (1) it is difficult to reproduce 
failures offsite for diagnosis; (2) offsite diagnosis cannot provide timely guidance for 
recovery or security purposes; (3)it is infeasible to provide a programmer to diagnose 
every production run failure; and (4) privacy concerns ... 
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Full text available: «g pdf( 183.89 KB) 



There is an increasing interest in techniques that support measurement and analysis of 
fielded software systems. One of the main goals of these techniques is to better 
understand how software actually behaves in the field. In particular, many of these 
techniques require a way to distinguish, in the field, failing from passing executions. So 
far, researchers and practitioners have only partially addressed this problem: they have 
simply assumed that program failure status is either obvious (i.e., ... 
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